$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa File: 13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa (raw, json) Hash identifier: BhcLKqJL/sRzWT59kj2XwFGaO3KLvD6HzoFkPY+F3kc= Subject key identifier: C1:5E:06:FA:F9:8F:C1:9B:23:EF:F4:00:65:D7:C2:3C:78:72:29:5E Certificate issuer: /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Certificate serial: 010D0C9F43285848F4F75BB022117C5D9F4F5F80 Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 7029 IP address blocks: 40.132.168.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f7:5b:b0:22:11:7c:5d:9f:4f:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=24f3a85d-67f9-4e29-81ae-a6dd8b4d5bf1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c5:70:74:c6:9d:6b:9b:a3:48:69:8d:54:3c: 3a:60:69:65:1c:76:fd:f6:9c:64:d3:d4:4f:ff:55: 5f:bb:f3:fa:2f:6f:66:81:17:04:8b:2a:0d:bf:aa: 5a:19:76:4e:05:e0:46:91:2f:eb:bf:2a:8a:06:29: 88:0e:8a:ef:75:47:00:40:e7:e6:b8:ef:a4:36:39: fa:bd:a8:e9:e3:73:ab:30:ea:d4:dc:7a:52:56:07: 3d:77:e9:12:41:3d:d5:b1:82:c1:c8:58:aa:07:c4: 96:fa:80:66:25:66:94:dd:ad:b1:44:e1:72:5e:44: 64:c8:1f:ab:8c:f7:dc:d5:9b:5f:31:72:29:49:3c: 7a:90:29:18:5d:8c:31:97:2b:1d:0f:7f:72:9d:c4: 67:06:97:dd:e7:3e:eb:cb:c9:b7:99:51:4e:9c:0a: 32:c6:0c:fe:a3:ab:f1:ff:b2:53:a6:1e:ef:0c:c6: dd:73:7c:b9:e4:e8:b3:92:96:ed:ed:28:25:71:42: 3e:e2:f8:aa:d4:b6:1f:5f:59:9e:42:06:cd:cd:1a: c9:64:1b:a4:71:b3:5a:43:38:f1:6b:2c:0c:92:e0: bc:b8:e4:cf:55:d4:2f:62:8a:f4:4e:21:6b:aa:2e: fb:76:54:b6:aa:bc:cd:2c:7a:db:28:4e:e7:17:ca: 97:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:5E:06:FA:F9:8F:C1:9B:23:EF:F4:00:65:D7:C2:3C:78:72:29:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/13a4740b-6674-3dae-8c19-cdfd41f4fc1c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl X509v3 Authority Key Identifier: keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer sbgp-ipAddrBlock: critical IPv4: 40.132.168.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:60:fc:4f:31:90:05:8e:2d:f4:c7:0b:bc:cd:56:87:2e:0e: 46:f7:52:04:80:f0:ea:97:fb:f0:8a:d4:5e:c6:9b:6e:34:a7: c7:b4:ac:93:93:2e:3d:7d:c2:eb:49:1c:39:16:e6:bb:6c:d1: c4:0a:38:41:20:a4:81:e6:0a:a2:88:4e:43:e6:95:a4:4d:96: c8:0d:ad:d2:83:4b:25:70:d3:c0:40:c1:fb:fc:84:a7:79:7d: 29:bf:f1:67:5e:49:b8:75:3d:31:69:c9:00:88:d7:63:23:fa: 00:79:3f:fc:75:41:2f:ea:e0:2f:a0:e7:70:65:97:2f:46:3f: fe:b2:f0:26:72:b8:09:80:c9:cf:15:b8:d1:12:4c:92:d7:f1: 64:2b:d0:1a:c7:fe:b1:5c:a4:59:e0:fc:2a:74:1c:eb:f3:c3: a9:dd:f2:f9:35:bc:2a:8e:de:42:63:37:6d:dd:f6:34:40:d9: 06:d7:06:40:2b:42:51:78:e7:3b:c5:72:19:9e:8e:2f:d4:f6: 37:23:ef:da:dd:99:aa:f1:70:b0:f2:a1:ee:62:2a:ca:5a:05: 7d:09:a5:45:ff:84:bd:6a:eb:34:0c:cd:50:76:47:7e:bb:67: 74:c9:52:8b:d7:b9:d5:47:0c:a7:ed:dc:3b:1d:06:ad:75:41: ff:29:d1:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj091uwIhF8XZ9PX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDliZDUwNmUtNDQ3Yy00OGU3LTlkNDQtNGIzNzNiMzVi MmQzMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk MjRmM2E4NWQtNjdmOS00ZTI5LTgxYWUtYTZkZDhiNGQ1YmYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsVwdMada5ujSGmNVDw6YGllHHb99pxk09RP /1Vfu/P6L29mgRcEiyoNv6paGXZOBeBGkS/rvyqKBimIDorvdUcAQOfmuO+kNjn6 vajp43OrMOrU3HpSVgc9d+kSQT3VsYLByFiqB8SW+oBmJWaU3a2xROFyXkRkyB+r jPfc1ZtfMXIpSTx6kCkYXYwxlysdD39yncRnBpfd5z7ry8m3mVFOnAoyxgz+o6vx /7JTph7vDMbdc3y55Oizkpbt7SglcUI+4viq1LYfX1meQgbNzRrJZBukcbNaQzjx aywMkuC8uOTPVdQvYor0TiFrqi77dlS2qrzNLHrbKE7nF8qX5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFeBvr5j8GbI+/0AGXXwjx4cileMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80OWJk NTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3M2IzNWIyZDMvMTNhNDc0MGItNjY3NC0z ZGFlLThjMTktY2RmZDQxZjRmYzFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDliZDUwNmUtNDQ3Yy00OGU3LTlk NDQtNGIzNzNiMzViMmQzLzQ5YmQ1MDZlLTQ0N2MtNDhlNy05ZDQ0LTRiMzczYjM1 YjJkMy5jcmwwHwYDVR0jBBgwFoAUdwOJO4YyY/94LoeEDRI/xecTaOQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80OWJkNTA2ZS00NDdjLTQ4ZTctOWQ0NC00YjM3 M2IzNWIyZDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCKISoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChg/E8xkAWOLfTHC7zNVocuDkb3UgSA8OqX+/CK1F7Gm240p8e0rJOT Lj19wutJHDkW5rts0cQKOEEgpIHmCqKITkPmlaRNlsgNrdKDSyVw08BAwfv8hKd5 fSm/8WdeSbh1PTFpyQCI12Mj+gB5P/x1QS/q4C+g53Blly9GP/6y8CZyuAmAyc8V uNESTJLX8WQr0BrH/rFcpFng/Cp0HOvzw6nd8vk1vCqO3kJjN23d9jRA2QbXBkAr QlF45zvFchmeji/U9jcj79rdmarxcLDyoe5iKspaBX0JpUX/hL1q6zQMzVB2R367 Z3TJUovXudVHDKft3DsdBq11Qf8p0ZQ= -----END CERTIFICATE-----Generated at Mon Apr 28 07:57:37 2025 by rpki-client